Step 2: Up and Running

Your SSR1200 uses port MGMT (mgmt-0/0/0) as the default port to contact Mist for zero-touch provisioning (ZTP). You will also be setting up port 0/3 (ge-0/0/3) with a LAN network.

1. Connect the MGMT port to an Ethernet link that can assign a DHCP address to the SSR1200 and provide connectivity to the Internet and Mist.

   Note:

   For management, you can connect the SSR1200 to Mist using the MGMT port. You can also connect to Mist from one of the WAN ports only when the MGMT port is disconnected, or does not have a valid DHCP leased address and default route.

   Do not change the Mist management port once your appliance is powered on and connected to the Mist Cloud instance.

2. Connect port 0/3 to your LAN devices, such as

   • Mist-managed Juniper EX switches

   • Mist APs

   • User devices

   

3. Power on the SSR1200.

Your SSR1200 is now connected to the Mist cloud.

To add the SSR1200 to your organization's WAN Edge inventory, you must enter the SSR1200 claim information into Mist. The claim label (QR code sticker) on the front panel has the claim information.

To enter the claim information, do one of the following:

• Scan the QR code with the Mist mobile application.

• You can also manually enter the claim code in Mist. The claim code is the number above the QR code. For example: In this picture, the claim code is K6TAACRTCJWQ8GQ.

  

Add the network to be used for accessing applications over a LAN network segment.

1. Select Organization > Networks from the menu on the left.

2. Click Add Networks in the upper-right corner of the Networks page.

3. Enter a name for the network.

4. Enter the network subnet as 192.168.1.0/24.

   

5. Click Add.

This network is now defined for use across the entire organization, including the template that you will apply to your SSR1200.

1. Select Organization > Applications from the menu on the left.

2. Click Add Applications in the upper-right corner of the Applications page.

3. Enter the name for the application as Internet.

4. Enter 0.0.0.0/0, or all IPv4 address space in the IP Addresses field.

   

5. Click Add.

Your organization is now set up to provide access to the Internet.

Excellent! Now you have the SSR1200 waiting to be claimed, a network for your LAN, and an Internet application. Next, you need to create a WAN Edge template that ties them all together! Templates are reusable and keep the configuration consistent for every SSR1200 you deploy.

1. Select Organization > WAN Edge Templates from the menu on the left.

2. Click Create Template in the upper-right corner of the WAN Edge Templates page.

3. Enter a name for the template.

4. Click Create.

5. Enter the NTP and DNS information for the WAN edge device.

The first thing to do in your template is to describe which port to use for the WAN.

1. Scroll to the WAN section of the template, and click Add WAN.

2. Enter the name for the WAN port as wan1.

3. Enter the interface as ge-0/0/0 to designate it as a WAN port.

   

4. Click Add.

Next, associate your LAN network segment with the appropriate port on the SSR1200.

1. Scroll to the LAN section of the template, and click Add LAN.

2. From the Network dropdown menu, select your network segment to associate it with the LAN port.

3. Enter the interface for the LAN port, for example, ge-0/0/3.

4. Enter 192.168.1.1 as the IP Address that needs to be assigned to the WAN edge device .1 for use as the gateway in the network.

5. Enter /24 as the Prefix Length.

   

6. Select Server under DHCP to provide DHCP services to endpoints on this network.

7. Give your DHCP server an address pool starting with 192.168.1.100 and ending with 192.168.1.200.

8. Enter 192.168.1.1 as the gateway to be assigned to DHCP clients.

9. Finally, enter the IP addresses for the DNS Servers to be assigned to clients on the network. For example, 8.8.8.8, 8.8.4.4.

   

10. Click Add.

Your template has the WAN and LAN information. Now, you need to tell the SSR1200 how to use the information to connect users to applications. This is done using traffic steering and application policies.

To configure the steering policy:

1. Scroll to the Traffic Steering section of the template, and click Add Traffic Steering.

2. Enter a name for the steering policy, for example, local-breakout.

3. Click Add Paths to give your steering policy a path to send traffic.

4. Select WAN as the path type, and select your WAN interface. For applications that use the policy, this indicates you want the traffic to be sent directly out of the local WAN interface.

5. Click the ✓ button in the upper right corner of the Add Path panel, and then click Add at the bottom of the Add Traffic Steering side panel.

To configure the application policy:

1. Scroll to the Application Policies section of the template, and click Add Application Policy.

2. Enter a string in the Name column, and click the check mark to the right of your entry.

3. Select your LAN network from the Network column drop-down list. Select Allow from the Action column drop-down list.

4. Select your Internet application from the Applications column drop-down list.

5. Select your local breakout steering policy from the Traffic Steering column drop-down list.

Almost there! You now have a working WAN Edge template that you can apply to many sites and appliances across your organization.

Now that you have set up the template, you need to save and assign it to the site where your WAN edge device will be deployed.

1. Scroll to the top of the page and click Save.

2. Click the Assign to Site button, and select the site where you want the template configuration applied.

After the SSR1200 is onboarded to the Mist cloud, you'll need to assign it to a site so you can begin to manage the configuration and gather data in Mist cloud.

1. Select Organization > Inventory. The status of the SSR1200 is shown as Unassigned.

2. Select the SSR1200 and from the More drop-down list, select Assign to Site.

3. Select the site from the Site list.

   Note:

   Under Manage Configuration, do not check the Manage Configuration with Mist checkbox for the SSR1200 if it is using Session Smart Router software version 5.4.4. This allows the SSR1200 to reach out to the conductor IP address specified when the site was created to receive configuration information.

   If you are onboarding a Mist-managed appliance using Session Smart Router software version 6.0, select Manage Configuration with Mist. If you do not select Manage Configuration with Mist, the SSR1200 will not be managed by Mist.

4. Click Assign to Site.

The site assignment takes a few minutes. After the site is fully onboarded, use the Mist WAN Edge - Device View to access the SSR1200, and the Insights view to view events and activity.